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FIG. 4 
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FIG. 6 A 
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FIG. 6C 
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FIG. 7 



REGISTER VALUE 


CORRESPONDING 
DELAY TIME 


00 


0.2 ms 


01 


0.4 ms 


02 


0.8 ms 


03 


l.G ms 1 


04 


1.6 ms 1 


05 


3.2 ms 


06 


6.4 ms 


07 


12.8 ms 


08 TO FF 


NO DELAY 



FIG. 8 



ONE SCAN CYCLYE 



READ 
INPUTS 



EXECUTE USER 
PROGRAM 



INTELLIGENT MODULE 
COMMUNICATION 



MESSAGE 
PROCESSING 



SELF 
DIAGNOSTICS 



WRITE 
OUTPUTS 



1999P07535USOG 
9/42 



FIG. 3 
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FIG. 11 
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FIG. 12C 
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RETRIGGERS PULSE CATCH CIRCUITS FOR IBO INPUT POINTS 


USED BY SW FOR 
INPUT UPDATE 


REGISTER IB1PS: 


READ OF THIS REGISTER RETURNS CIB1[5:0] AND 
RETRIGGERS PULSE CATCH CIRCUITS FOR IB1 INPUT POINTS 


USED BY SW FOR 
INPUT UPDATE 


REGISTER IBOPSNR: 


READ OF THIS REGISTER RETURNS CIB0[7:0] AND LEAVES 
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FIG. 12E 
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FIG. 13 
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FIG. 14 A 
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FIG. 14B 
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CYCLE TIME PRESET REGISTER 
CYCLE TIME PIPELINE REGISTER 


2 TO 65535 


DELTA CYCLE TIME REGISTER 
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PULSE COUNT/WIDTH PIPELINE REGISTER 


1 TO I2 32 -1I 0 TO 65535 
PTO MODE PWM MODE 
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C: PLSxCTL.MEN = 0 



C: CycleDone AND 

PTOComplete AND 
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cycle time counter = cycle time counter * h 
IF (cycle time counter >* cycle time preset) THEN 
BEGIN //this is the CycleDone event 

pulse counter « pulse counter + 1; 

IF {pulse counter >= pulse count presetl THEN 

BEGIN //this is the PTOComplete event 

assert INTxPLS signal, if PTOComplete interrupts are enabled; 

IF (pipeline loaded flag is set! THEN 

BEGIN 

transfer values from pipline registers into operating registers! 
set pulse counter ■ 0; 
clear pipeline loaded flag; 

END 

ELSE //pipeline loaded flag is not set 
BEGIN 



GOTO PTO Disabled state, //disable the PLS block now 



END 
ENDIF 



END 



ELSE //not yet at PTOComplete 
BEGIN 



cycle time preset « cycle time preset ♦ delta cycle times 
IF (cycle time preset exceeds bounds) THEN 
BEGIN //this is the AdderError event 



assert INTxPLS signal, if AdderError interrupts are enabled: 
GOTO PTO Disabled state ; //disable the PLS block now 



END 
ENDIF 



END 
ENDIF 

set cycle time counter = 0; 



END 
ENDIF 

IF (cycle time counter >=(l/2 * cycle time preset)) THEN 
PLSxOUT • 0; 

ELSE //output still in logic high portion of the current cycle 
PLSxOUT = I, 

ENDIF 




C: DENOTES CONDITION 



C: CycleDone AND 

PIPELINE LOADED FLAG == 1 



FIG. 18 

cycle time counter = cycle time counter + 1; 
IF (cycle time counter >= cycle time preset! THEN 
BEGIN //this is the CycleDone event 



IF (pipeline loaded flag is setl THEN 
BEGIN 



transfer values from pipeline registers into operating registers! 
clear pipeline loaded flag : 



END 
ENDIF 

set cycle time counter = 0 ; 



END 
ENDIF 

IF (cycle time counter >= (pulse width preset! I THEN 
PLSxOUT = 0; 

ELSE //output still in logic high portion of the current cycle 
PLSxOUT = 1 ; 

ENDIF 
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FIG. 19 
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DESCRIPTION 
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PULSE TRAIN 
OUTPUT PROFILE 


PTOP t. n 


WHEN SO - 1, 
THE PTO PROFILE 
SPECIFIED IN THE 
TABLE FOR OUTPUT 
n IS EXECUTED. 
ENO <- SO » /e 


STK 

<CURRENT STEP> 


ENABLE: SO 

TABLE: VB, IB. QB. HB. 
(UI) SMB. SB. LB. 

*VD, *AC 
OUTPUT: KW 
(UI) 0 - 1 



DEFINITION OF THE TABLE FOR PTOP: 



BYTE 
OFFSET 


SEGMENT 


DESCRIPTION OF TABLE ENTRIES 


0 




NUNBER OF PROFILE SEGMENTS (40 SEGMENTS MAXIMUM) 


1 




CURRENT STEP NUMBER BEING EXECUTED 


2 


#1 


NUNBER OF STEPS (4 STEPS MINIMUM! 


4 




STARTING CYCLE TIME FOR THIS SEGMENT {2 TO G5535 jiSEC) 


6 




CHANGE IN CYCLE TIME PER STEP (SIGNED VALUE) (0 TO B5535 JiSEC) 


8 


«2 


NUMBER OF STEPS (4 STEPS MINUMUMI 


10 




STARTING CYCLE TIME FOR THIS SEGMENT (2 TO 65535 jiSEC) 


12 




CHANGE IN CYCLE TIME PER STEP (SIGNED VALUE) (0 TO 65535 jiSEC) 


• 
• 


• 
• 

* 


• 

* 



FIG. 20 
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FIG. 21 



SIGNAL NAME 


USE 


END 


EXPANSION MODULE DATA - A BI-DIRECTIONAL SIGNAL USED TO 
COMMUNICATE THE ADDRESS AND DATA TO AND FROM THE MODULE. 


EHC[ 1:0] 


EXPANSION MODULE CLOCKS - ONE CLOCK IS USED TO ACCESS 

CVDAMCTflU EVTCQMAI Tft TUC Dl f UUTI C TUT ftTLCD TO IIOCT1 Tfl 

CArArtblUN 1/U tXltHNAL IU Int rLl, WMLt 1 nt Ulntrl lo UotU IU 
ACCESS I/O THAT IS LOCAL TO THE PLC THAT DOES NOT CONNECT DIRECTLY 
TO THE ASIC. 


XA.0D 


ADDRESS/OUTPUT DISABLE - A DUAL FUNCTION SIGNAL USED TO RESET THE 
STATE MACHINE IN THE MODULES ON THE FIRST CLOCK OF EACH ACCESS 

PYPI C fAfTTVE 1 null AMn IICFfl Tfl rwniTATC fillTDIlT nTCAQI C A CATAI 
ITLLt lAUlVt LUWI AIuJ UotU IU INUllAIL UUIrUI UIoAdLI: WntN A rAIAL 

ERROR HAS BEEN DETECTED (ACTIVE LOW FOR AN RC TIME CONSTANT) . 


EMDDIR 


EXPANSION NODULE DATA DIRECTION - THIS SIGNAL INDICATES THE 
DIRECTION OF DATA FLOW ON THE EMD SIGNAL LINE. 

0 - DATA IS DRIVEN BY THE MODULE TO THE PLC 

1 - DATA IS DRIVEN BY THE PLC TO THE MODULE 


EHA[2:0] 


ESPANSION MODULE ADDRESS - THESE SIGNALS ARE DAISY CHAINED FROM 
PLC TO MODULE TO MODULE. THE VALUE INPUT TO A MOCULE BECOMES 
THAT MODULE'S ADDRESS. THE MODULE WILL OUTPUT ITS ADDRESS PLUS 
ONE TO THE NEXT MODULE. THE PLC DRIVES THESE SIGNALS TO 0 SO THAT 
THE MODULE CONNECTED TO THE PLC HAS THE ADDRESS OF 0. 


♦5V 


5 VOLT POWER SUPPLY - TWO SIGNALS CARRY +5 VOLTS. 


6ND 


POWER SUPPLY RETURN - TWO SIGNALS CARRY GROUND. 
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FIG. 22 
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CONTROL 
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TO NEXT MODULE 
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FIG. 23 



REFERENCE 
DESIGNATOR 


COMPONENT VALUE/ TYPE 


COMPONENT DESCRIPTION 


ICl 


74ABT125/74ABT12G 


TRI-STATE BUFFER 


CR1 


TVS 5.6V ZENER 


DIODE 


Rl 


4.7K ohm 


RESISTOR 


R2 


110 ohm 


RESISTOR 


R3 


220 ohm 


RESISTOR 


R4 


22 ohi 


RESISTOR 


CI 


0.1 uF 


CAPACITOR 


C2 


lOOpF 


CAPACITOR 



FIG. 24 



SIGNAL NAME 


DRIVING 
DEVICE 


DRIVE 


LEVELS 


RECEIVE LEVELS 


V OL 
(VOLTS) 
(MAX) 


kl 
(mA) 
(MINI 


V 0H 
(VOLTS) 
(MAX) 


X OH 
(mA) 
(MINI 


V IL 
(VOLTS) 
(MAX) 


V IH 
(VOLTS) 
(MIN) 


EMA(2:0] 


MODULE 


0.5 


3.0 


2.4 


-3.0 


O.B 


2.0 


XA.OD 


CPU 


0.55 


64.0 


2.0 


-32.0 


O.B 


2.0 


EMC 


CPU 


0.55 


G4.0 


2.0 


-32.0 


0.8 


2.0 


EMD 


CPU 


0.55 


64.0 


2.0 


-32.0 


O.B 


2.0 


MODULE 


0.55 


64.0 


2.0 


-32.0 


O.B 


2.0 
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FIG. 25 



EMC. 

EMD 
XA.OD 
EMDDIR " 



S7-200 CPU GENERATED READ CYCLE SEQUENCE 

jiruiriRJiri^^ 



< t~ha \r/ ra r m — i read data m 



EMD DRIVEN BY PLC 



iL 



EMD DRIVEN BY MODULE 



MA 
R 
RA 

CP 

READ DATA 
DP 



\ 



MODULE ADDRESS FOR MODULES 0 TO G (3 BITS) 

READ /WRITE BIT (READ ACTIVE LOW) 

REGISTER ADDRESS FOR REGISTERS RO TO R15 (4 BITS) 

CONTROL PARITY GENERATED BY THE CPU ON MA, R, AND RA 12 BITS) 

DATA READ FROM THE MODULE (B BITS) 

DATA PARITY GENERATED BY THE MODULE ON READ DATA (2 BITS) 



FIG. 26 

/\ 



S7-200 CPU GENERATED WRITE CYCLE SEQUENCE 

emc __njuiTinjuin^^ 

EMD i HA / R \ RA~^GEX WRlTF. DATA OF^HV- 



xa.od vy 



EMDDIR ' 



V 



/ 



EMD DRIVEN BY PLC ' EMD' 

DRIVEN BY MODULE 

MA - MODULE ADDRESS FOR MOOULES 0 TO G (3 BITS) 
R - READ/WRITE BIT (READ ACTIVE LOW) 
RA - REGISTER ADDRESS FOR REGISTERS RO TO R15 14 BITS) 
CP - CONTROL PARITY GENERATED BY THE CPU ON MA. R, AND RA (2 BITS) 
WRITE DATA - DATA WRITTEN TO THE MODULE (8 BITS) 

DP - DATA PARITY GENERATED BY THE CPU ON WRITE DATA 12 BITS) 
Ack - MODULE ACKNOWLEDGE OF A GOOD WRITE CYCLE (2 BITS) 
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FIG. 27 
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d 


e 


PO 


BIT 0 


BIT 2 


BIT 4 


BIT G 


BIT 7 


PI 


BIT 1 


BIT 2 


BIT 3 


BIT 5 


BIT 7 


5 BIT C 


DD PARITY = !( ((a xor b) xor (c xor d 


xor e 



FIG. 28 



PLC TYPE 


PORT 0 


PORT 1 


CPU 212 


25G 




CPU 214 


25G 




CPU 215/2 1G 


25G 


25G 



FIG. 29 



INTERRUPTS 




INSTRUCTION 


MNEMONIC S 
OPERAND (SI 


DESCRIPTION 


STL STATUS 
ELEMENT 


VALID OPERANDS 


PASS TOKEN 


PASS 


USER PROGRAM 
HAS COMPLETED 
ITS USE OF THE 
TOKEN HOLD 
PERIOD AND IS 
RETURNING CONTROL 
TO THE SYSTEM. 


STK 
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FIG. 30 A 



( IMPLEMENT \xS3000 
FREEPORT y 



FORCE AN INTERRUPT 



S3O02 




USER PROGRAM CONTROLS 
TRANSMISSION AND RECEPTION OF 
MESSAGES USING THE FREEPORT 



S3014 



ATTACH AN INTERRUPT EVENT 



SYSTEM PROTOCOL HOLDS THE TOKEN 



-S3004 



-S300G 



USER PROGRAM PASS CONTROL 
BACK TO THE SYSTEM BY THE 
EXECUTTION OF SPECIAL INSTRUCTION 
THAT TERMINATES FREEPORT 
OPERATION 



-S301G 



PLC PASSES CONTROL TO 
THE USER PROGRAM 



-S3008 



THE SYSTEM RESUMES NORMAL 
OPERATION BY PASSING THE TOKEN 
TO THE NEXT STATION 



PLC CONTROLS THE UART SETTINGS 



SET MODE BITS BY THE PLC TO PPI 
MASTER MODE 




-S3010 



-S3012 



■S3018 



SYSTEM RESPONSIBLE FOR 
MAINTAINING ASPECTS OF THE 
NETWORK JUST AS IF THE USER 
PROGRAM HAD NEVER BEEN GIVEN 
A TIME SLICE DURING THE TOKEN 
HOLD TIME OF THE PLC 




-S3020 
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FIG. 30B 



SH BIT DEFINITION (READ/WRITE) 



SH BITS 



DESCRIPTION 



SM30 



PORT 0: CQMHUNICATIQN PORT USAGE 



NSB 

7 



LSB 



SMB30 



p 


p 


d 


r 


r 


r 


0 


n 



pp (PARITY) 
'00' - NO PARITY 
'01' - HEN PARITY 
'10' - NO PARITY 
'li' - ODD PARITY 



d ID ATA BITS/CHARI 
T - 8 BITS/CHAR 
T - 1 BITS/CHAR 



rrrlBAUD RATE! 
'000' - 38,400 
'001' - 19.200 
'010' - 9G00 



•Oil' 
'100' 
'101' 
'110' 
'111' 



- 4800 

- 2400 

- 1200 

- GOO 

- 300 



Mi(PflOTOCOL) 

'00* - PPI SLAVE (DEFAULT) 
•01' - FREEPORT 
'10* - PPI MASTER 
• 11' - RESERVED (PPI SLAVE! 



WHEN THE USER SELECTS THE CODE mm = 10 (PPI HASTERI . THE PLC WILL BECOME A MASTER ON 
THE NETWORK ALLOWING THE NETR AND NETW INSTRUCTIONS TO BE EXECUTED. BITS 2 THROUGH 7 
ARE IGNORED IN PPI MODES. IN PPI MASTER MODE WITH THE TOKEN ACQUIRED INTERRUPT ENABLED, 
THESE BITS ARE USED TO SETUP THE UART PROIR TO TRANSFERRING CONTROL TO THE USER'S PROGRAM. 



SH130 



PORT 0: COMMUNICATION PORT USAGE (CPU 21G ONLY) 



NSB 

7 



LSB 



SHB130 



Pi P 


d 


r i r i r 


m ; m 



pp (PARITY) 
'00' - NO PARITY 
•01' - EVEN PARITY 
'10' - NO PARITY 
•11' - ODD PARITY 



d (DATA BITS/CHARI rrrlBAUD RATEI tir (PROTOCOL) 



T 



- 8 BITS/CHAR 

- 7 BITS/CHAR 



'001' 
'010' 
'Oil' 
'100' 
'101' 



- 38,400 

- 19,200 
-9GO0 

- 4800 

- 2400 

- 1200 



'00' - PPI SLAVE IDEFAULTI 

•01' - FREEPORT 

•10' - PPI MASTER 

•11' - RESERVED (PPI SLAVEI 



'110' - GOO 
'111' - 300 

WHEN THE USER SELECTS THE CODE m - 10 (PPI HASTERI . THE PLC WILL BECOME A NASTER ON 
THE NETWORK ALLOWING THE NETR AND NETW INSTRUCTIONS TO BE EXECUTED. BITS 2 THROUGH 7 
ARE IGNORED IN PPI MODES. IN PPI MASTER MODE WITH THE TOKEN ACQUIRED INTERRUPT ENABLED, 
THESE BITS ARE USED TO SETUP THE UART PROIR TO TRANSFERRING CONTROL TO THE USER'S PROGRAM. 
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FIG. 30C 



SH BIT DEFINITION (READ/WRITE) ICONTINUEDI 


SM BITS 


DESCRIPTION 


SH87 


PORT 0: RECEIVE MESSAGE CONTROL BYTE, ICPU 212/214/216) 

HSB LSB 
7 0 


en ; sc ec il ! c/o ! trtr bk i 0 


en: ENABLE/DISABLE RECEIVE MESSAGE BIT IS CHECKED EACH TIME THE RCV INSTRUCTION IS 
EXECUe. IF THIS BIT IS A '0', THEN THE RECEIVE MESSAGE FUNCTION IS DISABLED. IF THIS 
BIT IS A T, THEN THE RECEIVE MESSAGE FUNCTION IS ENABLED. 

sc: 0 - IGNORE SNBB8; 1 - USE THE VALUE OF SMB88 TO DETECT START OF MESSAGE 

ec: 0 - IGNORE SNB89, 1 - USE THE VALUE OF SMBB9 TO DETECT END OF MESSAGE 

il: 0 - IGNORE SNW90, 1 - USE THE VALUE OF SMW90 TO DETECT AN IDLE LINE CONDITION 1 

c/n: 0 - USE TIMER AS AN INTER-CHARACTER TIMER, 1 - USE TIMER AS A MESSAGE TIMER 

tiir: 0 - IGNORE SNW92 : 1 - TERMINATE RECEIVE IF THE TIME PREIOD IN SMW92 IS EXCEEDED 

bk: 0 - IGNORE BREAK CONDITIONS; 1 - USE BREAK CONDITION AS START OF MESSAGE DETECTION 

l BY SETTING THE sc AND bk BITS TO 0 AND THE en, il, c/m AND tnr BITS TO 1 WITH AN IDLE LINE 
TIMER VALUE OF ZERO, SHW92 WILL BE USED TO TIME OUT THE RCV INSTRUCTION WITHOUT RECEIVING 
ANY CHARACTERS. IF THE TIMER IS NOT USED Itir - 01 , THEN ANY CHARACTER RECEIVED WILL BE USED 
AS START OF MESSAGE. 

tuc DTK ftF TUP MF^ACF TNTPfiQIlPr fYlNTRAI flYTF ARF IKFTi Tfl HFFTNF THF fRTTFRTA RY UHTfH THF 
InC Dllo Ur ItlL IlLJoALjt lrtlLmUrl lUNIflUL OTIl Ant UjlU IU Lluinc IIX LrulLnlA Di WULn inL 

MESSAGE IS IDENTIFIED BOTH START OF MESSAGE AND END OF MESSAGE CRITERIA ARE DEFINED. TO 
DETERHINE THE START OF A MESSAGE EITHER OF TWO SETS OF LOGICALLY ANDED START OF MESSAGE 
CRITERIA MUST BE TRUE AND MUST OCCUR IN SEQUENCE (IDLE LINE FOLLOWED BY START CHARACTER OR 
BREAK FOLLOWED BY START CHARACTER) . TO DETERHINE THE END OF A MESSAGE THE ENABLED END OF 
MESSAGE CRITERIA ARE LOGICALLY Ored. THE EQUATIONS FOR START AND STOP CRITERIA ARE GIVEN 
BELOW: 

Start of Message » il » sc * bk * sc 

End of Message = ec t tmr + naxieim character count reached 

NOTE: RECEIVE WILL AUTOMATICALLY BE TERMINATED BY AN OVERRUN OR A PARITY ERROR (IF ENABLED! . 


SM88 


PORT 0: START OF MESSAGE CHARACTER. (CPU 212/214/218) 


SM89 


PORT 0: END OF MESSAGE CHARACTER. (CPU 212/214/21G! 


SM90 
SH91 


PORT 0: IDLE LINE TIME PERIOD GIVEN IN MILLISECONDS. THE FIRST CHARACTER RECEIVED AFTER THE 
IDLE LINE TIME HAS EXPIRED IS THE START OF A NEW MESSAGE. SH90 IS MSB. 
(CPU 212/214/2161 


SM92 
SM93 


PORT 0: INTER-CHARACTER/MESSAGE TIMER TIMEOUT VALUE GIVEN IN MILLISECONDS. IF THE TIME 
PERIOD IS EXCEEDED, THE RECEIVE MESSAGE IS TERMINATED. SM92 IS MSB. (CPU 212/214/2161 


SM94 


PORT 0: MAXIMUM NUMBER OF CHARACTERS TO BE RECEIVED (1 TO 255 BYTES) (CPU 212/214/21GI 



1999P07535US0G 
28/42 



FIG. 30D 



SM BIT DEFINITION (READ/WRITE) (CONTINUED! 


SM BITS 


DESCRIPTION 


SH187 


PORT 1: HESSAGE INTERRUPT CONTROL BYTE. (CPU 216 ONLYI 

HSB LSB 
7 0 


en i sc ec il ; c/n i tnr bk i 0 

■ til 


en: ENABLE/DISABLE RECEIVE HESSAGE BIT IS CHECKED EACH TINE THE RCV INSTRUCTION IS 

EXECUTED. IF THIS BIT IS A T, THEN THE RECEIVE HESSAGE FUNCTION IS OISABLEO. IF THIS 
BIT IS A "1". THEN THE RECEIVE HESSAGE FUNCTION IS ENABLED. 

sc: 0 - IGNORE SNB1B9-. 1 - USE THE VALUE OF SHB188 TO DETECT START OF HESSAGE 

ec: 0 - IGNORE SMB1B9; 1 - USE THE VALUE OF SHB1B9 TO DETECT EN) Of HESSAGE 

il: 0 - IGNORE SNW190, i - USE THE VALUE OF SHV130 TO DETECT AN IDLE CONDITION 1 

c/n: 0 - USE TIMER AS AN INTER-CHARACTER TIMER; 1 - USE TIHER AS A HESSAGE TIMER 

tnr: 0 - IGNORE SMW192, 1 - TERMINATE RECEIVE IF THE TIME PREIOD IN SMW192 IS EXCEEDED 

bk: 0 - IGNORE BREAK CONDITIONS, 1 - USE BREAK CONDITION AS START OF HESSAGE DETECTION 

% SETTING THE sc AND bk BITS TO 0 AND THE en, il, c/n AND tnr BITS TO 1 WITH AN IDLE LINE 
TIHER VALUE OF ZERO. SHW192 WILL BE USED TO TIME OUT THE RCV INSTRUCTION WITHOUT RECEIVING 
ANY CHARACTERS. IF THE TIHER IS NOT USED (trar = 0) , THEN ANY CHARACTER RECEIVED WILL BE USED 
AS START OF HESSAGE. 

THF RTK (f THF NFSSAfiF TNTFRHIIPT flWRfll RYTF ARF IKFR TO (1FFTNF THF fRTTFRTA RY WHTPH THF 
iiiL oiio ur inc nuonuL liiimnuri iiUninuL uwl tv\l ujlu iu uli hi. mil uuiuun ui hiulm mil 

HESSAGE IS IDENTIFIED. BOTH START OF HESSAGE AND END OF HESSAGE CRITERIA ARE DEFINED. TO 
DETERMINE THE START OF A HESSAGE EITHER OF TWO SETS OF LOGICALLY ANDED START OF HESSAGE 
CRITERIA HUST BE TRUE AND HUST OCCUR IN SEQUENCE (IDLE LINE FOLLOWED BY START CHARACTER OR 
BREAK FOLLOWED BY START CHARACTER) . TO DETERMINE THE END OF A HESSAGE THE ENABLED END OF 
HESSAGE CRITERIA ARE LOGICALLY Orel THE EQUATIONS FOR START AND STOP CRITERIA ARE GIVEN 
BELOW: 

Start of Message = il » sc t bk * sc 

End of Nessage = ec + tnr t laxinun character count reached 

NOTE: RECEIVE WILL AUTOMATICALLY BE TERMINATED BY AN OVERRUN OR A PARITY ERROR (IF ENABLED) . 


SH188 


PORT 1: START OF HESSAGE CHARACTER. (CPU 21G ONLY) 


SM189 


PORT 1: END OF HESSAGE CHARACTER. (CPU 216 ONLY) 


SM190 
SN191 


PORT 1: IDLE LINE TIME PERIOD GIVEN IN MILLISECONDS. THE FIRST CHARACTER RECEIVED AFTER THE 
IDLE LINE TIME HAS EXPIRED IS THE START OF A NEW HESSAGE. SH190 IS HSB. (CPU 216 ONLYI 


SM192 
SM193 


PORT 1: INTER-CHARACTER/HESSAGE TIMER TIMEOUT VALUE GIVEN IN MILLISECONDS. IF THE TIME 
PERIOD IS EXCEEDED, THE RECEIVE HESSAGE IS TERHINATED. SH192 IS MSB. (CPU 216 ONLYI 


SM194 


PORT 1: MAXIMUM NUMBER OF CHARACTERS TO BE RECEIVED (1 TO 255 BYTES) (CPU 216 ONLYI 
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FIG. 30E 



PLC 
TYPE 


PORT 0 


PORT 1 


NUMBER OF 


:ONNECTIONS 


BUFFER SIZE 


NUMBER OF 


:ONNECTIONS 


BUFFER SIZE 


TOTAL 


RESERVED 


(BYTES) 


TOTAL 


RESERVED 


IBYTESI 


CPU 221 


4 


1 - PG 
1-OP 


128/256 








CPU 222 


4 


1 - PG 
1 - OP 


128/256 








CPU 224 


4 


1 - PG 
1 - OP 


128/256 








CPU 22G 


4 


1 - PG 
1 - OP 


128/256 


4 


1 - PG 
1 - OP 


128/258 
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FIG. 31 

/\ 




RECEIVE RESPONSE 



I 



■S3100 



SEND MESSAGE 



-S3112 



NO INTERVENING ACKNOWLEDGEMENT 



S3 102 



USE PREDEFINED MESSAGE TYPES 



■S3 104 



ESTABLISH ASSOCIATION REQUEST 



■S310G 



ALLOW TIME REQUEST 



■S3108 



ISSUE RESPONSE 



-S3110 



PREDETERMINED CHECK CODE APPENDED 






USE POLYNOMIAL 






CALCULATE CRC 






PRESET CRC GENERATOR 






VALIDATE MESSAGE 



-S3114 



-S311G 



-S3118 



-S3120 



-S3122 
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FIG. 32 A 



PROGRAM CONTROL FUNCTIONS 




INSTRUCTION 


HNEHONIC 8 
OPERANDISI 


DESCRIPTION 


STL STATUS 
ELEMENT 


VALID OPERANDS 


HIDE 


HIDE n, a, p 


THE HIDE LABEL 
MARKS THE START 
OF A BLOCK OF n 
INSTRUCTIONS THAT 
ARE ENCRYPTED 
USING THE 
PASSWORD, p, 
WHEN a IS NON- 
ZERO. 


STK, SMB1 


ENABLE: NONE 

n: KW(2 BYTES) 

(UI) 

a: KWI2 BYTES) 
(UI) 

p: K0I4 BYTES) 
(UI! 
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FIG. 32B 

/\ 




HIDE FUNCTION 



■S3200 



EXECUTE CODE 



■S3212 



SET P FLAG 



-S3202 



RE-ENCRYPT CODE 



■S3214 



ENCRYPT CODE 



-S3204 



INSERT HIDE LABEL 



-S3206 



COMPILE 



■S320B 



DECRYPT CODE 



-S3210 
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FIG. 33 A 



PROGRAM CONTROL FUNCTIONS 




TMCTDI IPTTrtM 

INblnUCIlUN 


nNbMONlC S 


DESCRIPTION 


STL STATUS 




VALID OPERANDS 




OrbHANU lb) 




ELEMENT 






SYSTEM FUNCTION 


SFC f.s. 


WHEN SO - 1, 


STK, 


ENABLE: SO 


CALL 


#_parins f 


EXECUTE THE 


SMBl. 


f: 


KW 




p0.pi.p2 

r ' r ■ r ■ 


SYSTEM FUNTION 


<pO>, 
<pl>, 


(UIJ 


0-65536 




IDENTIFIED BY f 




KW 






ANU Inc. SUB- 


<p2>, . . . 


(ill) 


0-65536 






FUNCTION 












IDENTIFIED BY s. 




#parms: KB 










((H) 


0-1B 










po... 


.: Bit, Byte, Word. 










Dword 










Bit 


V.I.Q.H.SH.S. 












T.C.L 










Byte 


VB.IB.QB.MB, 










SMB. SB. KB, LB 










Word 


VW.T.C.IW, 












QW.MW.SHW. 












SW.LW.KW 










Dvord 


VD.ID.QD.MD, 












SMD.SD.HC, 












LD.KD.SVB, 












SIB.SQB.SMB, 












ST.SC.SSB 










NOTE: 


CONSTANTS ANO 










ADDRESS POINTER 










SPECIFICATIONS ARE NOT 










ALLOWED FOR OUTPUT OR 










INPUT/OUTPUT PARAMETERS. 
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FIG. 33B 




■S3302 

PROVIDE HANDSHAKING PROTOCOL " 



I 



, -S3304 

DOWNLOAD SFC 



I 



'S330G 

SFC IMPLEMENTED AS PLC FUNCTION ' 



\ 
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FIG. 34 A 



INSTRUCTION ADDRESS OF WINDOW START 
LENGTH OF STATUS DATA FOR 1ST INSTRUCTION 



V 



ENO 


SCR 


S4 


S3 


S2 


SI 



SO 



STL STATUS DATA 



2 BYTES 
1 BYTE 
1 BYTE 
n BYTES 



LENGTH OF STATUS DATA FOR 2ND INSTRUCTION 



V 



ENO 



SCR 



S4 



S3 S2 SI SO 



1 BYTE 
1 BYTE 
n BYTES 



STL STATUS DATA 



FIG. 34B 



ST 



INSTRUCTIONS 



LD SMO.O 



LBL 5 



DECW ACO 



LDN SHU 



JMP 5 



INSTRUCTIONS IN THE STL 
STATUS WINDOW 



COMPILE CODE 
BYTE OFFSET 



INSTRUMENTED CODE 



n - 1 



n ♦ 1 



n t 2 



n + 3 



n t 4 



n + 5 



n * 6 



n ♦ 7 



n 1 8 



n 1 9 
n ♦ 10 
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FIG. 34C 

/\ 




IDENTIFY STL 



-S3400 



CAPTURE STL STATUS 



-S3412 



SAVE ORIGINAL 



I 



•S3 402 



ADJUST RETURN VALUE 



-S3414 



COMPILE 



I 



■S3404 



DETERMINE WINDOW 



-S3416 



BRANCH TO INSTRUMENTED CODE 



I 



-S3406 



MAINTAIN POINTER 



-S3418 



NEXT COMPILED INSTRUCTION 



-S3408 



RETURN 



-S3420 



BRANCH USING LCALL 



-S3410 
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FIG. 34D 





BASIC INSTR. 


COMPILED TO 


BYTES CYCLES 


1 


LD 


RLC A 

MOV C,<BrT> 


2 1 


2 


LDN 


HIP A 

MOV C,<BIT> 

CPL C 


1 1 


3 


A 


ANL C,<BIT> 
NOP 


2 2 


4 


AN 


ANL C,/<BIT> 
NOP 


I \ 


J 


n 

U 


UnL b.NJJ.P 

NOP 


1 1 


fi 

u 


ON 


flRI f /<RTT> 

NOP 




7 




MOV <BIT>,C 
NflP 


i \ 


n 

U 


ai n 


AM r Apr a 
RR A 


-4 ^ 


9 


OLD 


ORL C.ACC.O 

RR A 
nn n 


i i — 


10 


NOT 


CPL C 

NOP 

NOP 


i } 


11 


LPS 


RL A 

Mflv Arr n a 

HUT nUlr.U t n 


i i 


12 


LPP 


RRC A 

NOP 

NOP 


i i 


13 


LRD 


MOV C.ACC.O 




14 


RET 


RET 
NOP 
NOP 




15 


INT 


CLR A 

NOP 

NOP 




16 


END 


JNC $t0 
RET 




17 


CRETI 


JNC $+0 
RET 
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FIG. 35 A 



HOUSING 


HEIGHT 


WIDTH 


DEPTH 


CPU 221 


80 mm 


90 mm 


62 mm 


CPU 222 


80 mm 


90 mm 


62 mm 


CPU 224 


80 mm 


120.5 mm 


62 mm 


CPU 22G 


80 mm 


190 mm 


62 mm 


8 POINT I/O MODULE 


80 mm 


46 mmm 


62 mm 


1G POINT I/O MODULE 


80 mm 


71.2 mm 


62 mm 


32 POINT I/O MODULE 


80 mm 


125 mm 


62 mm 


INTELLIGENT MODULE 


80 mm 


90 mm 


62 mm 
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3640 



3630-4 
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FIG. 37A 





Ri 




Rn 






• • • 





FIG. 37B 



3716 
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FIG. 38 



r 



PROGRAMMABLE CONTROLLER 
INTERNALS 

3803 



3803 

SIGNAL FR0M~X 
DIGITAL LOGIC 



L. 




3801 



..J OUTPUT LOAD AND LOAD 
POWER SUPPLY 
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FIG. 39 




PROGRAMMABLE CONTROLLER 
INTERNALS 



OUTPUT LOAD AND 
LOAD POWER SUPPLY 



